https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-39389.htmlhttps://patchthecve.com/cve/CVE-2022-39389.htmlWed, 17 Jun 2026 04:58:16 +0000HIGH 8.2: Lightning Network Daemon (lnd) is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version `v0.15.4` are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments https://patchthecve.com/cve/CVE-2021-41593.htmlhttps://patchthecve.com/cve/CVE-2021-41593.htmlWed, 17 Jun 2026 04:08:42 +0000HIGH 8.6: Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.https://patchthecve.com/cve/CVE-2020-26896.htmlhttps://patchthecve.com/cve/CVE-2020-26896.htmlWed, 17 Jun 2026 03:08:29 +0000HIGH 8.2: Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-chain HTLC was already settled before releasing the preimage. In the case of a hash-and-amount collishttps://patchthecve.com/cve/CVE-2020-26895.htmlhttps://patchthecve.com/cve/CVE-2020-26895.htmlWed, 17 Jun 2026 03:08:29 +0000MEDIUM 5.3: Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid local commitment/HTLC transactions. This can be exploited by any peer with an open channel regardless of the victim situation (e.g., routing node, payment-receiver,